MAL-2025-141010 Malicious code in concurrently-ophiuchus-cordelia-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e47618e5d0ca1380ac6b5315c5c9c7f14e7db876525828a16091163fa78518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147442 Malicious code in rigel-websockets-centaurus-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a42e432e68015b338ef2f1b14b30042cd08cea6c9c001efa9cb761aa3540fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145931 Malicious code in package-ganymede-aurora-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e90255487efd08bc6f593e89aa88ee9297b0baf8b426b7ca816dacd1f45ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147992 Malicious code in slides-polaris-version-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf35e9d3704878c92e55276f6c4364b9b7151ccaf75ff7eb6050fd1d9fb18df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144482 Malicious code in local-auriga-miranda-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf113f613d25eae6bdfefed5ddb02dd6df5cc88de9e599953906e96e2578637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143307 Malicious code in hermes-child-process-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca93f163efe1c3e5aef570b5278b355cc483a6872c9f8921df0fa1197fa4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149126 Malicious code in venus-toml-google-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145839 Malicious code in ophiuchus-rest-pyxis-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547b7500947c13f7570bcf6fe144a0da3824389089069c1d4651b017b265c190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149242 Malicious code in vulcan-kaus-deimos-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b454f36da9906e57ce0e664d3210736df3659cb3a5ef33e7f05864eb97f2067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147400 Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145189 Malicious code in morgan-uglify-js-resolvers-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cb0db225d6809f534a14885e444e93e9cc389a848bf65f9442aae866673ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145187 Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142404 Malicious code in farout-cz-conventional-changelog-loop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32def6e54f295429be6ec6c01f65d319ae3db26c400298a888645b4981e893b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146988 Malicious code in quito-barnard-selenium-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636fe8e5472750665c3549099e7c1323370a7f084de4ef5aee264377c304ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146632 Malicious code in promise-antares-nconf-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd959dc2b522874aeb0719f4d4696294100ae6b64786ba500b999a1acd864330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...